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la the Clai Tns' 

Please amend the claims as indicated below. 

1. (cancelled) 

2. (cancelled) 

3. (cancelled) 

4. (cancelled) 

5. (cancelled) 

6. (previously presented) A method of providing security against unauthorized access to internal 
resources of a network device comprising: 

receiving a digital signature at a security association manager (SAM); 
said SAM requesting a de-encryption code; 

said SAM de-encrypting said digital signature with said de-encryption code; 
said SAM authenticating said de-encrypted digital signature; 

said SAM requesting allowed operations associated with said authenticated signature; 

a policy server receiving said request for allowed operations associated with said 
authenricated signature; 

said poUcy server comparing said authenticated signature with information stored on said 
policy server; and 

said policy server sending a response to said SAM indicating an access level 
corresponding to said authenticated signature. 



PAGE 5/ir RCVD AT 1/1012005 2:17:54 PM [Eastern Standard Tim^ ^ 



(lSrJan-10. .01:35pfn Froni-St8ubing,McGuiness i Manaras LLP 



978 264 9119 



T-447 P. 006/01 1 F-134 



Serial No, 09/307,452 -3- Art Unit: 2131 



7. (Originai) A method of providing security according to Claim 6 Either comprising: 

said policy server authenticating said request for allowed operations associated with said 
authenticated signature prior to comparing said authenticated signature with said infonnation 
stored on said policy server. 



8. (cancelled) 

9. (cancelled) 

10. (cancelled) 
IL (cancelled) 

12. (previously presented) Apparatus for providing security against unauthorized access to 
internal resources of a network device comprising: 

a security association manager (SAM) configinred to receive a digital signature; 

wherein said SAM is configured to send a message including a portion of said digital 
signature; 

wherein said message includes a request for an encryption decoder; 

wherein said SAM is further configured to receive a response to said message; and 

wherein said SAM is configured to send a digitally signed message requesting an access 

level for program code associated with said digital signature, in response to receiving said 

response message; 

a policy server configured to receive said request for allowed operations associated with 

said authenticated signature; 

said policy server including a comparison device configured to compare said 
authenticated signature Avith infonnation stored on said policy server, and 

said policy server being configured to send a response to said SAM indicating an access 
level corresponding to said authenticated signature. 
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13. (cancelled) 



14. (cancelled) 

15. (cancelled) 

16. (cancelled) 

17. (cancelled) 

18. (currently amended) Apparatus for providing security against unauthorized access to internal 
resources of a network device comprising: 

n^P-^ <^ , within a security association manager, for receiving a digital signature including 
an onciyption cod e; 

TTiA fln g, within said security association manager, for accessing a de-encryption code 
associated with said digital signanire. and for decrypting and authenticating said digital signature 
j a - olectrical oommunioation wth Qoid moana for rocoiving ; and 

tnp^n R ^ within a policv server, for receiving a request for.allowed op erations associated 
with said authenticated digital signature policy serve rf br dctonnininfl allowed operations 
aGGooiated with ooid digital signatur e; and 

TTiPjyn s , within said policv server, responsive to said requests and to a comparison of said 
authenticated digital signature with information within said policv server, f or f oeoiving a 
downloadoblo filing including said digital signal ond assigniag detemiining an access level 
a java thread associated with said digital signature, and for s ending an indication of said access 
level in a response to said security association manager . 
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